Received: by mail.netbsd.org (Postfix, from userid 605) id 87BB184D36; Mon, 19 Dec 2022 13:32:06 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id B880184D32 for ; Mon, 19 Dec 2022 13:32:05 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id 6mQ5Iumge9fI for ; Mon, 19 Dec 2022 13:32:03 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id CF22D84C86 for ; Mon, 19 Dec 2022 13:32:03 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id C8C94FA90; Mon, 19 Dec 2022 13:32:03 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1671456723284880" MIME-Version: 1.0 Date: Mon, 19 Dec 2022 13:32:03 +0000 From: "Thomas Klausner" Subject: CVS commit: pkgsrc/security/osv-scanner To: pkgsrc-changes@NetBSD.org Reply-To: wiz@netbsd.org X-Mailer: log_accum Message-Id: <20221219133203.C8C94FA90@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1671456723284880 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: wiz Date: Mon Dec 19 13:32:03 UTC 2022 Added Files: pkgsrc/security/osv-scanner: DESCR Makefile PLIST distinfo modules.mk Log Message: security/osv-scanner: import osv-scanner-1.0.1 Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies. OSV-Scanner provides an officially supported frontend to the OSV database that connects a project's list of dependencies with the vulnerabilities that affect them. Since the OSV.dev database is open source and distributed, it has several benefits in comparison with closed source advisory databases and scanners: - Each advisory comes from an open and authoritative source - Anyone can suggest improvements to advisories, resulting in a very high quality database - The OSV format unambiguously stores information about affected versions in a machine-readable format that precisely maps onto a developer's list of packages The above all results in fewer, more actionable vulnerability notifications, which reduces the time needed to resolve them. To generate a diff of this commit: cvs rdiff -u -r0 -r1.1 pkgsrc/security/osv-scanner/DESCR \ pkgsrc/security/osv-scanner/Makefile pkgsrc/security/osv-scanner/PLIST \ pkgsrc/security/osv-scanner/distinfo \ pkgsrc/security/osv-scanner/modules.mk Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1671456723284880 Content-Disposition: inline Content-Length: 23990 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Added files: Index: pkgsrc/security/osv-scanner/DESCR diff -u /dev/null pkgsrc/security/osv-scanner/DESCR:1.1 --- /dev/null Mon Dec 19 13:32:03 2022 +++ pkgsrc/security/osv-scanner/DESCR Mon Dec 19 13:32:03 2022 @@ -0,0 +1,18 @@ +Use OSV-Scanner to find existing vulnerabilities affecting your +project's dependencies. + +OSV-Scanner provides an officially supported frontend to the OSV +database that connects a project's list of dependencies with the +vulnerabilities that affect them. Since the OSV.dev database is +open source and distributed, it has several benefits in comparison +with closed source advisory databases and scanners: + +- Each advisory comes from an open and authoritative source +- Anyone can suggest improvements to advisories, resulting in a + very high quality database +- The OSV format unambiguously stores information about affected + versions in a machine-readable format that precisely maps onto a + developer's list of packages + +The above all results in fewer, more actionable vulnerability +notifications, which reduces the time needed to resolve them. Index: pkgsrc/security/osv-scanner/Makefile diff -u /dev/null pkgsrc/security/osv-scanner/Makefile:1.1 --- /dev/null Mon Dec 19 13:32:03 2022 +++ pkgsrc/security/osv-scanner/Makefile Mon Dec 19 13:32:03 2022 @@ -0,0 +1,17 @@ +# $NetBSD: Makefile,v 1.1 2022/12/19 13:32:03 wiz Exp $ + +DISTNAME= osv-scanner-1.0.1 +CATEGORIES= security +MASTER_SITES= ${MASTER_SITE_GITHUB:=google/} +GITHUB_TAG= v${PKGVERSION_NOREV} + +MAINTAINER= pkgsrc-users@NetBSD.org +HOMEPAGE= https://github.com/google/osv-scanner/ +COMMENT= Vulnerability scanner written using the OSV project +LICENSE= apache-2.0 + +USE_LANGUAGES= # none + +.include "modules.mk" +.include "../../lang/go/go-module.mk" +.include "../../mk/bsd.pkg.mk" Index: pkgsrc/security/osv-scanner/PLIST diff -u /dev/null pkgsrc/security/osv-scanner/PLIST:1.1 --- /dev/null Mon Dec 19 13:32:03 2022 +++ pkgsrc/security/osv-scanner/PLIST Mon Dec 19 13:32:03 2022 @@ -0,0 +1,2 @@ +@comment $NetBSD: PLIST,v 1.1 2022/12/19 13:32:03 wiz Exp $ +bin/osv-scanner Index: pkgsrc/security/osv-scanner/distinfo diff -u /dev/null pkgsrc/security/osv-scanner/distinfo:1.1 --- /dev/null Mon Dec 19 13:32:03 2022 +++ pkgsrc/security/osv-scanner/distinfo Mon Dec 19 13:32:03 2022 @@ -0,0 +1,149 @@ +$NetBSD: distinfo,v 1.1 2022/12/19 13:32:03 wiz Exp $ + +BLAKE2s (github.com__burnt_sushi_toml_@v_v1.2.1.mod) = cd3c2cea509a40639fa5501d594ba981c1385767f14e35780d21b8bd313977a4 +SHA512 (github.com__burnt_sushi_toml_@v_v1.2.1.mod) = 0e8cdda81300811f629bce3a9307de05450036f750f8c3c0cd5b70854f8f95bd962ce99bfe1325c8d1bf562a5b7b94afb9e9fd2dbe4dcc45325fac6e27471102 +Size (github.com__burnt_sushi_toml_@v_v1.2.1.mod) = 43 bytes +BLAKE2s (github.com__burnt_sushi_toml_@v_v1.2.1.zip) = 172deba3f8187ec14c6d6c3401043bf3844ed4c27d8fffbb556c677cbe66c9aa +SHA512 (github.com__burnt_sushi_toml_@v_v1.2.1.zip) = bf355ac81e5ecdb38b0839fe5f8258b0298806b99d1ee18365ef8d47acb5c9a8c41df6a736a437704cdac51b213e4bc181189885632b34315946888eb60ca958 +Size (github.com__burnt_sushi_toml_@v_v1.2.1.zip) = 238822 bytes +BLAKE2s (github.com__cyclone_d_x_cyclonedx-go_@v_v0.7.0.mod) = 5347440142f93fe506859c63cfc59e144f04a573580ffd03e95b142bb6cf8288 +SHA512 (github.com__cyclone_d_x_cyclonedx-go_@v_v0.7.0.mod) = 7a859fb6bf691a3905061bfce928d8c7f08bf4faf1e4272de9d332eede5db05a210cbad8a1d37c0c50ee86f471f3ebd58fc25baa9c2a728e36eeab4d859200ea +Size (github.com__cyclone_d_x_cyclonedx-go_@v_v0.7.0.mod) = 289 bytes +BLAKE2s (github.com__cyclone_d_x_cyclonedx-go_@v_v0.7.0.zip) = 8fd072838c3b40cc7575e5f9e0d9a1705a242ba15bc496b59b6648828f7fc28d +SHA512 (github.com__cyclone_d_x_cyclonedx-go_@v_v0.7.0.zip) = 2359def0338225f34cc5af5b68bd8dccc032843290d40d425463d775bf61c8bd089912fa03cbfb963315b50d411e2799dbf072ab2a53013bcbd346319240b87c +Size (github.com__cyclone_d_x_cyclonedx-go_@v_v0.7.0.zip) = 188541 bytes +BLAKE2s (github.com_cpuguy83_go-md2man_v2_@v_v2.0.2.mod) = 5d28aa7bd4d3be65c094ff1eff00044ed7a895928d188f7a279b5bd9a596d393 +SHA512 (github.com_cpuguy83_go-md2man_v2_@v_v2.0.2.mod) = d39412bb14c058291d07276337f802547bfb1a682cc65199cb04334f8089b6ea5d4d73587c2765c518f9e27fa3421c276eaea616d7cfbe36a2a244326edf1cb5 +Size (github.com_cpuguy83_go-md2man_v2_@v_v2.0.2.mod) = 100 bytes +BLAKE2s (github.com_cpuguy83_go-md2man_v2_@v_v2.0.2.zip) = 7f5fbbc9f0fbf2427d07c23c257d64746e06ab20abcfdcd50fadf5f0c01f5307 +SHA512 (github.com_cpuguy83_go-md2man_v2_@v_v2.0.2.zip) = 311a471e5080d971d5dd3f353367d5e370a22e0e0c6134de8f5d5a4574e6e0be2e303d81fb3054d5298e695dfa8d15b973450ae71c8167fda8a7daffb01d4190 +Size (github.com_cpuguy83_go-md2man_v2_@v_v2.0.2.zip) = 12539 bytes +BLAKE2s (github.com_davecgh_go-spew_@v_v1.1.0.mod) = eee11d0ec5d2260dc11d9bfe8f9d523e54530b71cc8357f43c0214b3b74bef5c +SHA512 (github.com_davecgh_go-spew_@v_v1.1.0.mod) = 5e079462f7e0dff0efda71f580aa185700cfa936b718a19d0e2a8c63212e47a07022dca0c282832d48e5165aae8e82aeeeb2ac3664268f1148fc772010fb860e +Size (github.com_davecgh_go-spew_@v_v1.1.0.mod) = 34 bytes +BLAKE2s (github.com_davecgh_go-spew_@v_v1.1.1.mod) = eee11d0ec5d2260dc11d9bfe8f9d523e54530b71cc8357f43c0214b3b74bef5c +SHA512 (github.com_davecgh_go-spew_@v_v1.1.1.mod) = 5e079462f7e0dff0efda71f580aa185700cfa936b718a19d0e2a8c63212e47a07022dca0c282832d48e5165aae8e82aeeeb2ac3664268f1148fc772010fb860e +Size (github.com_davecgh_go-spew_@v_v1.1.1.mod) = 34 bytes +BLAKE2s (github.com_google_go-cmp_@v_v0.5.9.mod) = becdef0764c43b119969e6c10646c6fafece1f936110eaa977757d2e2e381cd0 +SHA512 (github.com_google_go-cmp_@v_v0.5.9.mod) = 89e0014b0c3ffa2578ab38c237fee3d2280d6955e810c83e426d4924cec07cfc796adc45074fc237629c5ff88a93044dc406472febf1adf73deae82cb1b24b80 +Size (github.com_google_go-cmp_@v_v0.5.9.mod) = 41 bytes +BLAKE2s (github.com_google_go-cmp_@v_v0.5.9.zip) = 80c5ec42a097df492fa38764041d42e7ee0a182565688e90205efddc5b49da56 +SHA512 (github.com_google_go-cmp_@v_v0.5.9.zip) = 9b7e5fb278a983db5809cf07ca9c9ba0127e55e0750397f730d5dda95dd1eafdb8b0b90e6923cf6b465948392eaf7b2461697b0e426d7b4067493850379a8711 +Size (github.com_google_go-cmp_@v_v0.5.9.zip) = 130220 bytes +BLAKE2s (github.com_jedib0t_go-pretty_v6_@v_v6.4.3.mod) = 957262dbcb60231fe98abeb81cfc00fdeb4d2cc899f3b9d43d810ae8d206492d +SHA512 (github.com_jedib0t_go-pretty_v6_@v_v6.4.3.mod) = 22c7040387c802713a62e05200edb19403accbea1b445f0ef32dfe5ccd26d05c888149df42d04b2429ccd5576bddad279c1dd8eff9362b422fc41e583a9c8146 +Size (github.com_jedib0t_go-pretty_v6_@v_v6.4.3.mod) = 220 bytes +BLAKE2s (github.com_jedib0t_go-pretty_v6_@v_v6.4.3.zip) = f76709cb2fe59fdff27544b0d55938e58d4a782b586ff5df68a1105cef43ff94 +SHA512 (github.com_jedib0t_go-pretty_v6_@v_v6.4.3.zip) = 9a60bd94711696d473d0d6bcab51b44065971db14029fcddefa10b004f41c7631cc035e7962f92cab2f022aee42494bdc2363d448a18c4787c845397850384d6 +Size (github.com_jedib0t_go-pretty_v6_@v_v6.4.3.zip) = 787640 bytes +BLAKE2s (github.com_mattn_go-runewidth_@v_v0.0.13.mod) = 8df0af400904d313f84666016bb58fa961611b14296a6ee0b534ea7942608632 +SHA512 (github.com_mattn_go-runewidth_@v_v0.0.13.mod) = b96cca212a7024f0039ddd3a744fe818ab2e028b8ac2fd4472ce76ee9b496de3abb0960718c1106a98cf7e6df652dcf2884fe5ed95979bd9016399ea4abd324d +Size (github.com_mattn_go-runewidth_@v_v0.0.13.mod) = 84 bytes +BLAKE2s (github.com_mattn_go-runewidth_@v_v0.0.13.zip) = 6867b08f5d64664bffa40c5f0ca0c5e54e14f76fd3148430ce360f8a595df11f +SHA512 (github.com_mattn_go-runewidth_@v_v0.0.13.zip) = e86a3b69601be1a0a15d7bfd5d93fce8d8c06b52c55c941a9ed62b44f05d3062e436d817661af14bb42838efc45875a63eb6042b196e1684db36e0fe6ed42a7f +Size (github.com_mattn_go-runewidth_@v_v0.0.13.zip) = 20978 bytes +BLAKE2s (github.com_package-url_packageurl-go_@v_v0.1.0.mod) = 5d0c7718609ec1df1c97fb05b478e1f7d027abbd93b6f98a3d40608cc975a079 +SHA512 (github.com_package-url_packageurl-go_@v_v0.1.0.mod) = 2b821ec68d19090a1b6ca9fc9345a2c21c685f37bbfa4b66f403ae81ce6b5e78f71e9507d405875566219caeed32b9cb84eb3705bf26587f9d9062ff2adcec1a +Size (github.com_package-url_packageurl-go_@v_v0.1.0.mod) = 53 bytes +BLAKE2s (github.com_package-url_packageurl-go_@v_v0.1.0.zip) = 3674c7ea8f7d18949c12849d12c6061c350b31641a712fc56e061212848ff37e +SHA512 (github.com_package-url_packageurl-go_@v_v0.1.0.zip) = 7088d1a757bf162cc23512c2483852fe6046562a3cec334a74cd7e872a5f8f5997f47add06b7ff1900504fdc03f20505daba9d76b4e74f6d135507fea594b8c0 +Size (github.com_package-url_packageurl-go_@v_v0.1.0.zip) = 10604 bytes +BLAKE2s (github.com_pkg_profile_@v_v1.6.0.mod) = 563307f28eecb8daf40cef3f4de587cb56d24eab0b8641a662733ca4654a347f +SHA512 (github.com_pkg_profile_@v_v1.6.0.mod) = 4ba06f5709a52eba5f8b27767a236de58418d2d077fd1efd4d293073f62894a6f40f7b7196118b8034d68b3c06727993d1670ddba65b0da758f9632142ead4a4 +Size (github.com_pkg_profile_@v_v1.6.0.mod) = 39 bytes +BLAKE2s (github.com_pmezard_go-difflib_@v_v1.0.0.mod) = 365dee34dcd09f0fbcccb2fff0be74a00fe71a80b9104b1ad3a3c199a48f5a28 +SHA512 (github.com_pmezard_go-difflib_@v_v1.0.0.mod) = c3d5c48cdb8ba6af7071a07cfede06e0ab67e3726d9de592a952fad40167dcbdd9621dc2c4df1bd3c28eb99d70b1b6d8d812441237c35bf492e5b7f07bd33902 +Size (github.com_pmezard_go-difflib_@v_v1.0.0.mod) = 37 bytes +BLAKE2s (github.com_rivo_uniseg_@v_v0.2.0.mod) = 9cf2a838a41e79c2133f00b4192de1d8204ef6dc7be601908ad9b2fb0c84c8df +SHA512 (github.com_rivo_uniseg_@v_v0.2.0.mod) = d6089badd618722b8d3584965f1a10290097f259024a444744f625fe5b439fef62c7e14f060fb8593197d003ecd6c29f0cb85700de0bdfbf2511ca66729db3bc +Size (github.com_rivo_uniseg_@v_v0.2.0.mod) = 39 bytes +BLAKE2s (github.com_rivo_uniseg_@v_v0.2.0.zip) = 979391f242312d88d58ff807872dc8d92a768eed36c77247c56a95cddfc3f7cd +SHA512 (github.com_rivo_uniseg_@v_v0.2.0.zip) = 88f37961ebe3a1701265a2f5cb606e97fe4ddd09e36ff13ca8c026e98640af5d35cb930e4d12b6690a97e5d934705102554c6d2912ebbb5ee08976c698cce2db +Size (github.com_rivo_uniseg_@v_v0.2.0.zip) = 45731 bytes +BLAKE2s (github.com_russross_blackfriday_v2_@v_v2.1.0.mod) = f0bc812b934149988d4ab1dcc12c2c63777f0a0d18126b5cba0e35ea880b775b +SHA512 (github.com_russross_blackfriday_v2_@v_v2.1.0.mod) = ac376a387fa39fe35dc4d073d8becd74e79f52e9d36b0a6628740dfe0e7c1f4fb6533fc262212663b105afcaa104082e055fa87d20cb3068359faae6dcba7738 +Size (github.com_russross_blackfriday_v2_@v_v2.1.0.mod) = 42 bytes +BLAKE2s (github.com_russross_blackfriday_v2_@v_v2.1.0.zip) = 85686101dbbeab3cb9c505afd1304dbe587d6fd5c029748e5d8aaafba881f0c5 +SHA512 (github.com_russross_blackfriday_v2_@v_v2.1.0.zip) = 11e29cdd7a8baee7995009755582c26eb819efd715e9dfa1442b5743c7bf5752188f0fa8f5ddb3452f05f371a280324406410b683609f6a510277d3e03b30ca0 +Size (github.com_russross_blackfriday_v2_@v_v2.1.0.zip) = 122358 bytes +BLAKE2s (github.com_spdx_gordf_@v_v0.0.0-20201111095634-7098f93598fb.mod) = 5ba22a168729851be309686b390302d4397466c95f8de15f0568577e583d6848 +SHA512 (github.com_spdx_gordf_@v_v0.0.0-20201111095634-7098f93598fb.mod) = 5d726fd5c6323fa0da05e50432c9c43e3c08d66ac1a424ae88b157fd616b40bbee98c72616445dd0c1ab1428834d941b4db8a07e7819d736a3c94d400b230206 +Size (github.com_spdx_gordf_@v_v0.0.0-20201111095634-7098f93598fb.mod) = 38 bytes +BLAKE2s (github.com_spdx_gordf_@v_v0.0.0-20201111095634-7098f93598fb.zip) = 672bea7e132a81ae5967aed1cdf565e770796a7c73264529e262716522766533 +SHA512 (github.com_spdx_gordf_@v_v0.0.0-20201111095634-7098f93598fb.zip) = a53903e30e906d90d9b7f8c33262a2609fb55092bfa8808ccc9abcf6d7608f33d49f3a8bae149b24143e10dc1a058f02dc29978f977fdb4f5c24738e169f5b02 +Size (github.com_spdx_gordf_@v_v0.0.0-20201111095634-7098f93598fb.zip) = 43626 bytes +BLAKE2s (github.com_spdx_tools-golang_@v_v0.3.0.mod) = fdb6886367b43cc960e6bdb4372ad504d0226f651377c62385ed603e39144dfc +SHA512 (github.com_spdx_tools-golang_@v_v0.3.0.mod) = 16996f2671d5f2652c6af2de86883907be4e77340f3caae0428535a4b2f40e59c774af7e1d6cd11d7cc42da28ed813e92646504ded6424043f2f89f7a3fe9ecf +Size (github.com_spdx_tools-golang_@v_v0.3.0.mod) = 111 bytes +BLAKE2s (github.com_spdx_tools-golang_@v_v0.3.0.zip) = 3e721b4ec955b952997f98b96064fdb74064128284090e9cfbc51e9846e8221a +SHA512 (github.com_spdx_tools-golang_@v_v0.3.0.zip) = 54db2aa0dcbf8c647caa41b4faf39c08699bf2d4de649a2f24bff1d4383f10afaceaf66041b00b4a929a05f8063291cad42886aef372c05d9c3cd5b179dd3f27 +Size (github.com_spdx_tools-golang_@v_v0.3.0.zip) = 433961 bytes +BLAKE2s (github.com_stretchr_objx_@v_v0.1.0.mod) = 1eb73df00a63ad02b651d13ef6fec7b4842f22c3ecf50546104fddb717aa1c0b +SHA512 (github.com_stretchr_objx_@v_v0.1.0.mod) = 4e366e5a60559a8863cb2a50280deb307d8bf885ca5440cce1b49a084b4cc4583b3481240125f35f161226592a43f2c0a426152f117d79b68c92c72a93f751d5 +Size (github.com_stretchr_objx_@v_v0.1.0.mod) = 32 bytes +BLAKE2s (github.com_stretchr_objx_@v_v0.4.0.mod) = e5c1d6b824d1be53abbb3b8f906a3f0bf77e3447b39eb0d9f9f4319c55ebb20e +SHA512 (github.com_stretchr_objx_@v_v0.4.0.mod) = 022706974a2aaaa604a814996d4307a0b0f4a408987ece5cb9d0fbd03d9a71bc9e5c4ae89877f9527858f4071829d85674732550a514562df1a406a95eed9d35 +Size (github.com_stretchr_objx_@v_v0.4.0.mod) = 137 bytes +BLAKE2s (github.com_stretchr_testify_@v_v1.7.1.mod) = 8f7c927dae69fdeb23ce71b39268d84489f12c4cb4cb30e23a564754fde44db8 +SHA512 (github.com_stretchr_testify_@v_v1.7.1.mod) = 197e6ef15edb27ded67ccfb636c252fe522f0930ff012341a4b593f25b5dd8282e4f658970931cfdeb8f2c5ee0b4ebac6738fe7634bf00896d12270fcbf4b31b +Size (github.com_stretchr_testify_@v_v1.7.1.mod) = 216 bytes +BLAKE2s (github.com_stretchr_testify_@v_v1.7.4.mod) = 4b9f1b2997c84b26b08b9c2b5febd4d7dad875c2869013e0e87d1cebbaff04f0 +SHA512 (github.com_stretchr_testify_@v_v1.7.4.mod) = 62122d19530516ad5a84d98ccb77f299c79bd0ad4da58314ce31d07696076de1b3d1150e603cb296e4ad8e5e839a9fd2241f1e8981fc3356379444d5062e0d26 +Size (github.com_stretchr_testify_@v_v1.7.4.mod) = 188 bytes +BLAKE2s (github.com_urfave_cli_v2_@v_v2.23.7.mod) = e7817cc8009179e3d383239ee1eacb41adf609a5d829cd9cc10a2fdd8a94a14d +SHA512 (github.com_urfave_cli_v2_@v_v2.23.7.mod) = 01ea9409e34f48874f1951fd264e252d704d60ab8032fb06a3740dacabc4bfb8d95a3c965863c6edd6f77a7db9cfbf0c14ef7464f766e06476b15ac7eb5ed015 +Size (github.com_urfave_cli_v2_@v_v2.23.7.mod) = 280 bytes +BLAKE2s (github.com_urfave_cli_v2_@v_v2.23.7.zip) = a91e1d5849e73ff53097e1e8f4173cafa4832ed00d8d8b2577daaddd6c3b3910 +SHA512 (github.com_urfave_cli_v2_@v_v2.23.7.zip) = d26e3eee294d6323e040599da9bfa521c9383c630d14fa799a36bdc26bbf641831adfcc31d8a9c2382d07326c2593111f908111c3b1255659a9e9d5d7e5bb05c +Size (github.com_urfave_cli_v2_@v_v2.23.7.zip) = 3544683 bytes +BLAKE2s (github.com_xrash_smetrics_@v_v0.0.0-20201216005158-039620a65673.mod) = ad828d24831b1aac61759a9d17221b2965b2d8fba7109b019238c4c195eda772 +SHA512 (github.com_xrash_smetrics_@v_v0.0.0-20201216005158-039620a65673.mod) = 2b8cee8b222f55816fd323944727f83de0f2705395057c8eea447bd4274390ebcfa0d96c211d0f185ec8a9eeff0fd3b60f4e8ef48a423f175e7b4c9a689a2b60 +Size (github.com_xrash_smetrics_@v_v0.0.0-20201216005158-039620a65673.mod) = 33 bytes +BLAKE2s (github.com_xrash_smetrics_@v_v0.0.0-20201216005158-039620a65673.zip) = e2d0ad536b6b6d27d2ce355c27372658392516a5540599f2ee2ac1123b97e3e5 +SHA512 (github.com_xrash_smetrics_@v_v0.0.0-20201216005158-039620a65673.zip) = fb375d6649128cc0485e449ccde0095f5cce862ba08701632fcf3680031ffa631897208c26605c00d8613cde157ee6b0dab47feae2724c405090f35f5819241f +Size (github.com_xrash_smetrics_@v_v0.0.0-20201216005158-039620a65673.zip) = 1826113 bytes +BLAKE2s (golang.org_x_exp_@v_v0.0.0-20221212164502-fae10dda9338.mod) = aac4a76e449ca4e568500574e57e621ae5c732e4054056554617b60460f543a8 +SHA512 (golang.org_x_exp_@v_v0.0.0-20221212164502-fae10dda9338.mod) = 60764e3104a3292802ed3c570a694906f3178e1f4d53802f0cbc447c294ae8cd4aed7b1be2d307fb8fee1c23aef8c4b6f1a8f829c3d08e7881d859ac0f4fdbf7 +Size (golang.org_x_exp_@v_v0.0.0-20221212164502-fae10dda9338.mod) = 176 bytes +BLAKE2s (golang.org_x_exp_@v_v0.0.0-20221212164502-fae10dda9338.zip) = 8486da664fb5a53b1d1abfcca3b172147b6107df19c814f9c8b926966eeb05f4 +SHA512 (golang.org_x_exp_@v_v0.0.0-20221212164502-fae10dda9338.zip) = 124fb041fc8d188ebd3c6e76dc7a2e1a9c4feeab4ce614e22b7f65344db7a201ebab49b9579bf238edeedf3bb258454b4e72570944294050a5506f1471ddb08b +Size (golang.org_x_exp_@v_v0.0.0-20221212164502-fae10dda9338.zip) = 431866 bytes +BLAKE2s (golang.org_x_mod_@v_v0.7.0.mod) = 46afeec3ff404db0c277f2327c09392ff6412842beaa74cc9cf91bb5a9210d96 +SHA512 (golang.org_x_mod_@v_v0.7.0.mod) = 76e9bc61587af5cca8e4b230f0f7e723e790d1c9d637e9db1e29d9ef49e0315ce611e3b94a2dee4ec7e1e672a3422dad4dec6efc9959eca6805fde6b7633ab83 +Size (golang.org_x_mod_@v_v0.7.0.mod) = 84 bytes +BLAKE2s (golang.org_x_mod_@v_v0.7.0.zip) = 090a7b5fb69131c5f6811754bf11ad3f9ac5cc52e72637a9dd2ef0b66bf98eac +SHA512 (golang.org_x_mod_@v_v0.7.0.zip) = 3cf55b009b680bebe1f173b1e284a447e4a87342645ba0a65efc8337ba558032bb17ac2376eddd3d629ee84870c613e3c8851181c583c08df2715e0bb1fb5c9b +Size (golang.org_x_mod_@v_v0.7.0.zip) = 161744 bytes +BLAKE2s (golang.org_x_sys_@v_v0.0.0-20190412213103-97732733099d.mod) = 6b2b0a0ac9d77adff84f1aab70cc38a4dcf14418c326fcb2dde80f104fb41e9f +SHA512 (golang.org_x_sys_@v_v0.0.0-20190412213103-97732733099d.mod) = 0c7b940d567c7685dcb55c76c69aedeaab2170f4f3bde458994c879bf344169f34fb3f3ca899b0f138a8b0b8be5031217b57a6edf5980e6066ff5cb92d1ff9ab +Size (golang.org_x_sys_@v_v0.0.0-20190412213103-97732733099d.mod) = 33 bytes +BLAKE2s (golang.org_x_sys_@v_v0.3.0.mod) = 66613eb38a59b8a7f75e1aaeb294a1c4ea290d4e9ae699137566025e50ed741c +SHA512 (golang.org_x_sys_@v_v0.3.0.mod) = 85e511b1261c1935f5ee4754ad31d1d946f9e10f0af9905f44c4348d6ce5104319c03fb38517dde616698f6487b0c62788cfa96bc0ffb3b6db80accd7e552655 +Size (golang.org_x_sys_@v_v0.3.0.mod) = 33 bytes +BLAKE2s (golang.org_x_sys_@v_v0.3.0.zip) = 196a4ed0cb55879c15c5dba9c1e69b04583fc328003580e6056c3de52a3fb310 +SHA512 (golang.org_x_sys_@v_v0.3.0.zip) = 0d14de6b67e169150564e56bf26f8f096f22ffdeba245b8e33b6d518fc5d482dc2da6b3633525cdc358173c9a4430bf914ae471546f0a49e2d7454c4ba33b35c +Size (golang.org_x_sys_@v_v0.3.0.zip) = 1862151 bytes +BLAKE2s (golang.org_x_term_@v_v0.3.0.mod) = 19381225007118a96ad21fda01a88d844b00776760f2175de2a06b6d1dd01880 +SHA512 (golang.org_x_term_@v_v0.3.0.mod) = 03e1b2b3e092e2fc09e4a506bd611f4c2a84d9e81029890661cd5995e3e793f5a57122db8742a89101fbb2ad00c55bb3cc977b7e1978452e8fcdbe23b5f73e1e +Size (golang.org_x_term_@v_v0.3.0.mod) = 67 bytes +BLAKE2s (golang.org_x_term_@v_v0.3.0.zip) = abbb13903a661dee3f675be82a8b0810e5a56f4b5137d150e3e34bb38451df7f +SHA512 (golang.org_x_term_@v_v0.3.0.zip) = 195328aebb4867f4de19b09dd4f1d6b7399bc7b7121a59c4ae889720fe0b958dc9a48893e16c3b98bce4b1b36ace65d3c9daf448f00d0c46c05b4557d42bbea7 +Size (golang.org_x_term_@v_v0.3.0.zip) = 19924 bytes +BLAKE2s (gopkg.in_check.v1_@v_v0.0.0-20161208181325-20d25e280405.mod) = 35cd1964700502d06b8c987979fb4dbddc41a5cda3368d037211b89d3587521f +SHA512 (gopkg.in_check.v1_@v_v0.0.0-20161208181325-20d25e280405.mod) = 9ac0f80ef05881387cb2f48f81560f3207fe586ea16495383662e6d62e43d93fac01dfe72e1d0063d3ab065331dab3a8098d7da4f1830ba1aff6f27f8e1bc1b2 +Size (gopkg.in_check.v1_@v_v0.0.0-20161208181325-20d25e280405.mod) = 25 bytes +BLAKE2s (gopkg.in_yaml.v2_@v_v2.4.0.mod) = bc2baf62a6e657cc41127b91b88509b4f2c0db68f57858ff8353d3f778154862 +SHA512 (gopkg.in_yaml.v2_@v_v2.4.0.mod) = 2790882fbfa812468b9b3443630b1f1ee67a968eb20da8e4a1bfd410e4b516a8a7e77c07414b64f17e11e2151161b85d019e172cc833a45b19e66d4c70f89f82 +Size (gopkg.in_yaml.v2_@v_v2.4.0.mod) = 95 bytes +BLAKE2s (gopkg.in_yaml.v2_@v_v2.4.0.zip) = 01c890cad6648dc32765fd2e52147de2b9dc6ef92a92504845f159031692d4a5 +SHA512 (gopkg.in_yaml.v2_@v_v2.4.0.zip) = d6f4ac547609c943adfc6b518ff03ac09da566ba2b29466abe8f6db3d5a41ae7e5c187068dce4e77271905b1aa88497ca49a43bb9bbf9c94011b7ccf1b4b2f42 +Size (gopkg.in_yaml.v2_@v_v2.4.0.zip) = 81183 bytes +BLAKE2s (gopkg.in_yaml.v3_@v_v3.0.0-20200313102051-9f266ea9e77c.mod) = 17da54ba1894b4653d4c1ab1ae6e9fe03928a96c69cdc8db6b6ea9e34d673991 +SHA512 (gopkg.in_yaml.v3_@v_v3.0.0-20200313102051-9f266ea9e77c.mod) = 307ca9123efc577ca04828996ee9d8edbb51794ccb4b8d9f169ba689e7276aa5f6ae106a04b22b7fab853ffacfebcbf74468b64eaefd57445864c1fbc77fad9d +Size (gopkg.in_yaml.v3_@v_v3.0.0-20200313102051-9f266ea9e77c.mod) = 95 bytes +BLAKE2s (gopkg.in_yaml.v3_@v_v3.0.1.mod) = 17da54ba1894b4653d4c1ab1ae6e9fe03928a96c69cdc8db6b6ea9e34d673991 +SHA512 (gopkg.in_yaml.v3_@v_v3.0.1.mod) = 307ca9123efc577ca04828996ee9d8edbb51794ccb4b8d9f169ba689e7276aa5f6ae106a04b22b7fab853ffacfebcbf74468b64eaefd57445864c1fbc77fad9d +Size (gopkg.in_yaml.v3_@v_v3.0.1.mod) = 95 bytes +BLAKE2s (osv-scanner-1.0.1.tar.gz) = 644a1fb79d9aa46070bc57e0b062c7e0308fce386a2de338e5de40752352b67e +SHA512 (osv-scanner-1.0.1.tar.gz) = ffbd08f9cbbf0523b3958cc3244e45c969421081ce9b7aa535129a330af66a9b2379317cb979bff84b1d366a40ceeeeea6c7a0b3263c5fcf5c00621e5cf3ff0c +Size (osv-scanner-1.0.1.tar.gz) = 87288 bytes Index: pkgsrc/security/osv-scanner/modules.mk diff -u /dev/null pkgsrc/security/osv-scanner/modules.mk:1.1 --- /dev/null Mon Dec 19 13:32:03 2022 +++ pkgsrc/security/osv-scanner/modules.mk Mon Dec 19 13:32:03 2022 @@ -0,0 +1,50 @@ +# $NetBSD: modules.mk,v 1.1 2022/12/19 13:32:03 wiz Exp $ + +GO_MODULE_FILES+= github.com/!burnt!sushi/toml/@v/v1.2.1.mod +GO_MODULE_FILES+= github.com/!burnt!sushi/toml/@v/v1.2.1.zip +GO_MODULE_FILES+= github.com/!cyclone!d!x/cyclonedx-go/@v/v0.7.0.mod +GO_MODULE_FILES+= github.com/!cyclone!d!x/cyclonedx-go/@v/v0.7.0.zip +GO_MODULE_FILES+= github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.mod +GO_MODULE_FILES+= github.com/cpuguy83/go-md2man/v2/@v/v2.0.2.zip +GO_MODULE_FILES+= github.com/davecgh/go-spew/@v/v1.1.0.mod +GO_MODULE_FILES+= github.com/davecgh/go-spew/@v/v1.1.1.mod +GO_MODULE_FILES+= github.com/google/go-cmp/@v/v0.5.9.mod +GO_MODULE_FILES+= github.com/google/go-cmp/@v/v0.5.9.zip +GO_MODULE_FILES+= github.com/jedib0t/go-pretty/v6/@v/v6.4.3.mod +GO_MODULE_FILES+= github.com/jedib0t/go-pretty/v6/@v/v6.4.3.zip +GO_MODULE_FILES+= github.com/mattn/go-runewidth/@v/v0.0.13.mod +GO_MODULE_FILES+= github.com/mattn/go-runewidth/@v/v0.0.13.zip +GO_MODULE_FILES+= github.com/package-url/packageurl-go/@v/v0.1.0.mod +GO_MODULE_FILES+= github.com/package-url/packageurl-go/@v/v0.1.0.zip +GO_MODULE_FILES+= github.com/pkg/profile/@v/v1.6.0.mod +GO_MODULE_FILES+= github.com/pmezard/go-difflib/@v/v1.0.0.mod +GO_MODULE_FILES+= github.com/rivo/uniseg/@v/v0.2.0.mod +GO_MODULE_FILES+= github.com/rivo/uniseg/@v/v0.2.0.zip +GO_MODULE_FILES+= github.com/russross/blackfriday/v2/@v/v2.1.0.mod +GO_MODULE_FILES+= github.com/russross/blackfriday/v2/@v/v2.1.0.zip +GO_MODULE_FILES+= github.com/spdx/gordf/@v/v0.0.0-20201111095634-7098f93598fb.mod +GO_MODULE_FILES+= github.com/spdx/gordf/@v/v0.0.0-20201111095634-7098f93598fb.zip +GO_MODULE_FILES+= github.com/spdx/tools-golang/@v/v0.3.0.mod +GO_MODULE_FILES+= github.com/spdx/tools-golang/@v/v0.3.0.zip +GO_MODULE_FILES+= github.com/stretchr/objx/@v/v0.1.0.mod +GO_MODULE_FILES+= github.com/stretchr/objx/@v/v0.4.0.mod +GO_MODULE_FILES+= github.com/stretchr/testify/@v/v1.7.1.mod +GO_MODULE_FILES+= github.com/stretchr/testify/@v/v1.7.4.mod +GO_MODULE_FILES+= github.com/urfave/cli/v2/@v/v2.23.7.mod +GO_MODULE_FILES+= github.com/urfave/cli/v2/@v/v2.23.7.zip +GO_MODULE_FILES+= github.com/xrash/smetrics/@v/v0.0.0-20201216005158-039620a65673.mod +GO_MODULE_FILES+= github.com/xrash/smetrics/@v/v0.0.0-20201216005158-039620a65673.zip +GO_MODULE_FILES+= golang.org/x/exp/@v/v0.0.0-20221212164502-fae10dda9338.mod +GO_MODULE_FILES+= golang.org/x/exp/@v/v0.0.0-20221212164502-fae10dda9338.zip +GO_MODULE_FILES+= golang.org/x/mod/@v/v0.7.0.mod +GO_MODULE_FILES+= golang.org/x/mod/@v/v0.7.0.zip +GO_MODULE_FILES+= golang.org/x/sys/@v/v0.0.0-20190412213103-97732733099d.mod +GO_MODULE_FILES+= golang.org/x/sys/@v/v0.3.0.mod +GO_MODULE_FILES+= golang.org/x/sys/@v/v0.3.0.zip +GO_MODULE_FILES+= golang.org/x/term/@v/v0.3.0.mod +GO_MODULE_FILES+= golang.org/x/term/@v/v0.3.0.zip +GO_MODULE_FILES+= gopkg.in/check.v1/@v/v0.0.0-20161208181325-20d25e280405.mod +GO_MODULE_FILES+= gopkg.in/yaml.v2/@v/v2.4.0.mod +GO_MODULE_FILES+= gopkg.in/yaml.v2/@v/v2.4.0.zip +GO_MODULE_FILES+= gopkg.in/yaml.v3/@v/v3.0.0-20200313102051-9f266ea9e77c.mod +GO_MODULE_FILES+= gopkg.in/yaml.v3/@v/v3.0.1.mod --_----------=_1671456723284880--